Paper/Archive/CVE-2023-31703

CVE-2023-31703

mitre — Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacke…

EPSS 4%public exploit CVSS 9.0

critical.is priorityof 100

CVSS 9.0 (ADP, NVD agree)9.0 / 10 × 3027.0 Not in CISA KEV+300.0 EPSS percentile 91.5.915 × 2018.3 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

CISA ADP9.0CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

NVD9.0CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

refgithub.com/sahiloj/CVE-2023-31703/blob/main/README.md refpacketstormsecurity.com/files/172540/eScan-Management-Console-14.0.1400.2281-Cross-Site-Scripting.html